ThreatCluster

Kimsuky Hackers Use Weaponized QR Codes for Mobile Malware Distribution

First seen 17 Dec 2025, 20:55 UTC •GbhackersCybersecuritynews •50

Article Content

Browse articles
ThreatCluster

The North Korean state-linked group Kimsuky has initiated a campaign using weaponized QR codes to distribute malicious mobile applications. This attack targets users through phishing sites that mimic package delivery services, with victims receiving smishing messages containing links to these sites. The malicious campaign was identified by security researchers in September 2025.

How this analysis works

Extracted Entities

1 / 2